Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados

40.392CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.190 exploits

Referência

CVE-2026-5811

CVE-2026-5811MEDIUM

SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error

33RIESGO

abrir ↗

Referência

CVE-2026-5810

CVE-2026-5810MEDIUM

SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-11962

CVE-2026-11962HIGH

FileOrganizer < 1.2.0 - Authenticated Arbitrary File Upload via elFinder File Operations

41RIESGO

abrir ↗

Referência

CVE-2010-1360

CVE-2010-1360—

Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP

23RIESGO

abrir ↗

Referência

CVE-2018-15140

CVE-2018-15140—

Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authent

28RIESGO

abrir ↗

Referência

CVE-2018-15172

CVE-2018-15172—

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.

23RIESGO

abrir ↗

Referência

CVE-2018-10576

CVE-2018-10576—

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentica

23RIESGO

abrir ↗

Referência

Microweber 1.2.11 - Remote Code Execution (RCE) (Authenticated)

CVE-2022-0557HIGHwebappsphp

OS Command Injection in microweber/microweber

53RIESGO

abrir ↗

Referência

CVE-2026-5104

CVE-2026-5104MEDIUM

Totolink A3300R cstecgi.cgi setStaticRoute command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5103

CVE-2026-5103MEDIUM

Totolink A3300R cstecgi.cgi setUPnPCfg command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5102

CVE-2026-5102MEDIUM

Totolink A3300R Parameter cstecgi.cgi setSmartQosCfg command injection

33RIESGO

abrir ↗

Referência

CVE-2026-2370

CVE-2026-2370HIGH

Improper Handling of Parameters in GitLab

41RIESGO

abrir ↗

Referência

CVE-2026-5101

CVE-2026-5101MEDIUM

Totolink A3300R Parameter cstecgi.cgi setLanCfg command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5046

CVE-2026-5046HIGH

Tenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5045

CVE-2026-5045HIGH

Tenda FH1201 Parameter WrlclientSet stack-based overflow

41RIESGO

abrir ↗

Referência

CVE-2026-5106

CVE-2026-5106MEDIUM

code-projects Exam Form Submission update_fst.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2026-5105

CVE-2026-5105MEDIUM

Totolink A3300R Parameter cstecgi.cgi setVpnPassCfg command injection

33RIESGO

abrir ↗

Referência

CVE-2026-5198

CVE-2026-5198MEDIUM

code-projects Student Membership System Admin Login index.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5197

CVE-2026-5197MEDIUM

code-projects Student Membership System delete_user.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5196

CVE-2026-5196MEDIUM

code-projects Student Membership System delete_member.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2026-5184

CVE-2026-5184MEDIUM

TRENDnet TEW-713RE setSysAdm command injection

33RIESGO

abrir ↗

Referência

CVE-2026-3881

CVE-2026-3881MEDIUM

Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF

33RIESGO

abrir ↗

Referência

CVE-2026-5183

CVE-2026-5183MEDIUM

TRENDnet TEW-713RE addRouting sub_421494 command injection

33RIESGO

abrir ↗

Referência

CVE-2014-5082

CVE-2014-5082—

Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus al

23RIESGO

abrir ↗

Referência

CVE-2010-1885

CVE-2010-1885—

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server

60RIESGO

abrir ↗

Referência

CVE-2014-5085

CVE-2014-5085—

A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, whi

23RIESGO

abrir ↗

Referência

CVE-2018-25381

CVE-2018-25381HIGH

Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters

41RIESGO

abrir ↗

Referência

CVE-2010-1947

CVE-2010-1947—

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable

23RIESGO

abrir ↗

Referência

CVE-2016-5399

CVE-2016-5399—

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attac

23RIESGO

abrir ↗

Referência

CVE-2026-14627

CVE-2026-14627MEDIUM

NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authentication

33RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.